From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <9front-bounces@9front.inri.net> X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.9 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 Received: from 9front.inri.net (9front.inri.net [168.235.81.73]) by inbox.vuxu.org (Postfix) with ESMTP id D767325476 for ; Sat, 3 Feb 2024 19:37:16 +0100 (CET) Received: from cc-smtpout1.netcologne.de ([89.1.8.211]) by 9front; Sat Feb 3 13:35:56 -0500 2024 Received: from cc-app2.netcologne.de (cc-app2.netcologne.de [89.1.9.191]) by cc-smtpout1.netcologne.de (Postfix) with ESMTP id 83ED812702 for <9front@9front.org>; Sat, 3 Feb 2024 19:35:53 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=netcologne.de; s=nc1116a; t=1706985353; bh=Kq/8j0IxJF52X1te+bh3CzJ2CZm14212bVKbGIVig2U=; h=Date:From:To:Message-ID:In-Reply-To:References:Subject:From; b=dlLlwWZfZZDQhjZVcHSbUwQus8Zh19SkP/iceWjgDP/MkaqAht/2lh0DwaKZhXVTk tgxOTIPzG8f2aCNFcyZj+szdjSpqYaR5VkH/BZg0n+nHOETR3I6LAW+zwcN468/LkE iZ1c39OzMsMWaBnN00iSC25U2ddRlGe9h8sFJ9yCwJiCoirxkiH6bvr/e2fZDio9qg yPsR5IyWyQ810zP4tuCGVkknTsPfY3h8OZsT9ns3lcJdC0Hhu37EFxgAkpaaUq2LFI rEpRefsrKBUmCgeAxqeEsHb3z0pVnIFK55jUlGDpby2+QJNg5pASa0Hqi3w6djJEka KDUoAdry5Wo6g== Received: from cc-app2.netcologne.de (localhost [127.0.0.1]) by cc-app2.netcologne.de (Postfix) with ESMTPA id 6394811E0C for <9front@9front.org>; Sat, 3 Feb 2024 19:35:53 +0100 (CET) Date: Sat, 3 Feb 2024 19:35:53 +0100 (CET) From: Arne Meyer To: 9front@9front.org Message-ID: <1230131450.4958643.1706985353338@comcenter.netcologne.de> In-Reply-To: <5C4DC27D67F57D53A645D16E277BBA25@9lab.org> References: <5C4DC27D67F57D53A645D16E277BBA25@9lab.org> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Priority: 3 Importance: Normal X-Mailer: Open-Xchange Mailer v7.10.6-Rev50 X-Originating-IP: 2001:4dd6:b560:0:24cb:9b2a:5cbe:577 X-Originating-Client: open-xchange-appsuite X-NetCologne-Spam: L X-Rspamd-Queue-Id: 6394811E0C X-Spamd-Bar: - X-Rspamd-Action: no action List-ID: <9front.9front.org> List-Help: X-Glyph: ➈ X-Bullshit: information-based wrapper lifecycle-scale NoSQL locator Subject: Re: [9front] ipv6 configuration Reply-To: 9front@9front.org Precedence: bulk Hey Igor, i think you can use an ip= tuple for ipv6. > igor@9lab.org hat am 03.02.2024 19:21 CET geschrieben: > > > I am trying to expose my 9front server via ipv6 in addition to ipv4. > The main reason for doing this is because mail servers that are backed > by IPv6 have a higher score and I would like to move my mail server > from obsd to 9front eventually. > > Unfortunately my knowledge about ipv6 is very limited and I hope one > of you has a working setup/snippet from /lib/ndb/local that could be > shared. > > Here is what I have in /lib/ndb/local with the IPv6 entry > at the bottom: > > > # -- system: localhost > sys=localhost dom=localhost ip=127.0.0.1 > > # -- authentication server to be used > auth=mux authdom=9lab > > # -- network (uniquely identified by 'ip' and 'ipmask') > ipnet=9lab ip=45.132.244.0 ipmask=255.255.252.0 ipgw=45.132.244.1 > dom=9lab.org > dns=46.38.225.230 > auth=mux > > # -- system: mux IPv4 (IP:45.132.244.17/22 GW:45.132.244.1) > sys=mux dom=mux.9lab.org ip=45.132.244.17 ether=6a822e1fa13e > > # -- system: mux6 IPv6 (IP:2a03:4000:48:2e::/64 GW:fe80::1) > sys=mux6 dom=mux6.9lab.org ipv6=2a03:4000:2a03:4000:48:2e::1 48:2e::1 ether=6a822e1fa13e > > > The domain name is setup correctly. Reverse DNS works as well > so that can't be an issue. > > Here is the output of netaudit: > > cpu% netaudit > env var $sysname=mux looks ok > checking this host's tuple: > sys=mux looks ok > ip=45.132.244.17 looks ok > dom=mux.9lab.org looks ok > ether=6a822e1fa13e looks ok > checking the network tuple: > we are in ipnet=9lab > ipgw=45.132.244.1 looks ok > dns=46.38.225.230 does not reply to ping > auth=mux looks ok > no fs= entry (needed for tls boot) > > > > I can't ping the host via ipv6; surely I am forgeting something obvious. > > Thanks in advance for any hints. > > Cheers, > Igor